Commit d6a0e0bf authored by Kees Cook's avatar Kees Cook
Browse files

ubsan: integer-overflow: depend on BROKEN to keep this out of CI 

Depending on !COMPILE_TEST isn't sufficient to keep this feature out of
CI because we can't stop it from being included in randconfig builds.
This feature is still highly experimental, and is developed in lock-step
with Clang's Overflow Behavior Types[1]. Depend on BROKEN to keep it
from being enabled by anyone not expecting it.

Link: https://discourse.llvm.org/t/rfc-v2-clang-introduce-overflowbehaviortypes-for-wrapping-and-non-wrapping-arithmetic/86507

 [1]
Reported-by: default avatarkernel test robot <oliver.sang@intel.com>
Closes: https://lore.kernel.org/oe-lkp/202505281024.f42beaa7-lkp@intel.com


Fixes: 557f8c58 ("ubsan: Reintroduce signed overflow sanitizer")
Acked-by: default avatarEric Biggers <ebiggers@kernel.org>
Link: https://lore.kernel.org/r/20250528182616.work.296-kees@kernel.org


Reviewed-by: default avatarNathan Chancellor <nathan@kernel.org>
Acked-by: default avatarMarco Elver <elver@google.com>
Signed-off-by: default avatarKees Cook <kees@kernel.org>
parent 368556dd

lib/Kconfig.ubsan

+2 −0
Original line number Diff line number Diff line
@@ -118,6 +118,8 @@ config UBSAN_UNREACHABLE 


config UBSAN_INTEGER_WRAP

	bool "Perform checking for integer arithmetic wrap-around"

	# This is very experimental so drop the next line if you really want it

	depends on BROKEN

	depends on !COMPILE_TEST

	depends on $(cc-option,-fsanitize-undefined-ignore-overflow-pattern=all)

	depends on $(cc-option,-fsanitize=signed-integer-overflow)